News

How OneFirewall scale with AWS and Kubernetes

Friday, Oct 16, 2020 by Alberto DeFrancesco AWS, Kubernetes, Cloud, Scalability

OneFirewall Alliance implements flexible software solutions that help enterprises to enhance security on top of their existing infrastructure, providing them with different agent solutions to interact with our centralized OneFirewall Cloud Defender solution, available “as-a-Service”. The OneFirewall Cloud Defender solution, as well as other implemented products, has been built on top of a microservices ecosystem, with different technologies involved. For the infrastructure, we adopted a cloud based infrastructure, according to a “as-a-Service” approach, and AWS Cloud provider has been selected.

Research partnership with the Polytechnic of Turin (Italy)

Monday, Oct 12, 2020 by Franco Amisano Machine Learning, ML, Forecast, OneEye, Predictive Analytics

OneFirewall Alliance is continuously looking for the improvement and the enhancement of its cyber security solutions. To this aim partnerships and collaborations have been established for the implementation of research and development activities. Our goal is to involve the top academic players in the sector of cyber security for the achievement of increasingly effective protection solutions. One of our first partners is the Polytechnic of Turin, one of the most prominent technological and educational institutions in Italy, with renown skills in the study and development of Machine Learning (ML) processes.

OneFirewall supports STIX 2.0

Friday, Sep 25, 2020 by Elton Bushati STIX, STIX2

Structured Threat Information Expression (STIX™) is a language and serialization format used to exchange Cyber Threat Intelligence (CTI). Since September 2020 OneFirewall Alliance (OFA) released a support to offer Cyber Threat Intelligence feeds also STIX v2.0 format, this is great news for us as we are now able to integrate CTI feeds using STIX format, but is also great for our alliance members who are now able to read our feeds in the standard STIX v2.

Actions to start CTI sharing

Friday, Sep 18, 2020 by OneFirewall Editorial Team CTI, Cyber Threats intelligence, Sharing

Actions to start CTI sharing in your organization Clear it with your manager If your organization is new to CTI sharing, the first thing to do is to get the general manager approval. Being overconfident about your organization’s appetite to share network data (especially if the managers don’t understand the benefits) can be a costly, yet an avoidable mistake. Start sharing a few data Don’t start planning to share details on a data exfiltration event that currently has your organization in crisis mode.

Cyber Threats intelligence

Thursday, Sep 17, 2020 by Elton Bushati CTI, Cyber Threats Intelligence, Sharing

Cyber Threats Intelligence: why share it across organizations Cyber Threat Intelligence (CTI) sharing is a fundamental process to guarantee the organizations’ security. The base principle is to take the learnings from a single organization and share these learnings across the organization and the specific industry to strengthen the security practices of everyone who may be concerned. By sharing CTI, security teams can alert each other about new findings across cyber threats, active cybercrime campaigns and indicators of compromise (IOCs) that are important for the cybersecurity community and about which they should be immediately aware of.

OneFirewall Alliance Vision

Tuesday, Sep 15, 2020 by OneFirewall Editorial Team OFA, OneFirewall, OneFirewall-Alliance

The human species across the years developed a natural filter to protect themself against threats, this engine works by accumulating data of our souranding, then we use these data to build a risk profile against actors that we interact. Past attacks indicates higher probability of risk from the same actor, therefore the natural reaction of a human is to prevent interaction of any kind, and this is calibrated based on the gains versus the risks.